CVE Catalog

CVE-2026-30067

Unknown
Published: Translated: NVD NIST

Summary

An issue in the complexQueryFilterSubprocess function in the NRF Discovery service of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via crafted input.

Risk Assessment

An attacker can overload the NRF service, leading to unavailability of network discovery functions.

Recommendation

Update free5gc and restrict access to the NRF service to trusted entities only.

Original NVD description (English source)

An issue in the complexQueryFilterSubprocess function in the NRF Discovery service of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS